Cyber Security Culture, Awareness & Communications Manager

LT Harper Group; Greater London; Hybrid; GBP 85,000 - 110,000; Full time

Job summary

LT Harper Group in London seeks a Cyber Security Culture, Awareness & Communications Manager to own the multi-year culture strategy and the awareness programme. You will demonstrate behavioural change with data to senior leaders and drive engagement across the business.

You will build a cross-divisional Cyber Champions network, manage external providers, and define metrics to track phishing resilience and culture maturity.

Qualifications

• Experience leading cyber security awareness, culture or behavioural change programmes.
• Experience developing communications strategy in a large organisation, including executive-level communications.
• Experience managing third-party suppliers or outsourced providers.

Responsibilities

• Build and own the cyber culture and awareness strategy, with a multi-year roadmap.
• Run the awareness programme end to end, including training and campaigns on phishing, insider risk, identity and OT security.
• Write and deliver cyber communications for technical, non-technical and executive audiences.
• Own the external awareness content provider, set KPIs and improve performance.
• Build and lead a Cyber Champions network across divisions with BISOs.
• Define culture and behaviour metrics and report to governance forums and risk committees.

Skills

Cyber awareness

Communications strategy

Vendor management

Job description

As Cyber Security Culture, Awareness & Communications Manager, you'll own how a global manufacturing organisation thinks and behaves around cyber risk. That means setting the multi-year culture strategy, running the awareness and communications programme, and showing senior leaders, with real data, that behaviour is changing.

What you'll do

• Build and own the cyber culture and awareness strategy, with a multi-year roadmap and a human risk management approach focused on the highest-risk behaviours
• Run the awareness programme end to end. This covers role-based training, annual mandatory education, and targeted campaigns on phishing, AI, insider risk, identity, incident reporting, and OT and manufacturing security
• Write and deliver cyber communications for technical, non-technical and executive audiences, including messaging for the CISO and during major cyber events
• Act as the commercial and operational owner of the external awareness content provider, setting KPIs and improving their performance
• Build and lead a Cyber Champions network across divisions, working with divisional leaders and BISOs (business information security officers)
• Define culture and behaviour metrics, from phishing resilience to culture maturity, and report them to governance forums and risk committees

What you'll need

• Experience leading cyber security awareness, culture or behavioural change programmes
• Experience developing communications strategy in a large organisation, including executive-level communications
• Experience managing third-party suppliers or outsourced providers

Nice to have:

• Hands-on experience with awareness platforms such as Immersive Labs, KnowBe4 or Hoxhunt
• Experience setting up a security champions network
• Experience in a global, federated organisation
• Knowledge of behavioural science or human-centred security

What's in it for you

This role comes with real ownership. The strategy, roadmap, champions network, supplier relationship and reporting all sit with you. Success is measured by how behaviour changes across the organisation, and you'll have a direct line to the CISO and senior leadership.

The essentials

• London, hybrid, 2 days per week in the office